1. 



In a computer system that including a plurality of initiators, each for initiating 



communication with target devices over a network, a method for configuring the computer 
system to securely communicate with a target device over the network, the method 
comprising the following performed by an abstraction module that configures each of the 
plurality of initiators in a manner that security conflicts between the plurality of initiators is 
avoided: 

an act of exposing a common interface that may be used to configure any of the 
plurality of initiators; 

an act of receiving an indication through the common interface that a selected 
initiator from among the plurality of initiators is to be configured to communicate with a 
selected target device; 

an act of retrieving security information from a database that includes information 
that is relevant to configuring security for any of the plurality of initiators; 

an act of identifying a security configuration of the selected initiator using the 
retrieved security information; 

an act of determining that the identified security configuration would not cause the 




selected initiator to conflict with any of the other of the plurality of initiators; and 



configuration is different than the retrieved security information. 



an act of configuring the selected initiator using the identified security configuration. 



2. 



A method in accordance with Claim 1, wherein the identified security 



O 



3. A method in accordance with Claim 1, wherein the identified security 
configuration is the same as the retrieved security information. 
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4. A method in accordance with Claim 1, wherein the retrieved security 
information comprises IPSec configuration information. 



5. A method in accordance with Claim 1, wherein the retrieved security 
information comprising CHAP configuration information 

6. A method in accordance with Claim 1, wherein the selected initiator is 
configured to cause communication to occur with the target device using iSCSI. 

7. A method in accordance with Claim 1, wherein the act of retrieving security 
information from a database comprises an act of retrieving the security information from an 
Active Directory. 

V 

8. A method in accordance with Claim 1, wherein the selected initiator is a 
hardware initiator. 



10. A method in accordance with Claim 1, wherein the act of retrieving security 




software initiator. 



9. 



A method in accordance with Claim 1, wherein the selected initiator is a 



O 



information occurs in response to the act of the abstraction module receiving the indication. 
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11. A method in accordance with Claim 1 , wherein the indication through the 
common interface is received in response to a request to communicate with the selected 
target device. 

12. A method in accordance with Claim 1, wherein the indication through the 
common interface is received in advance of any express request to communicate with the 
selected target device. 

13. A method in accordance with Claim 12, wherein the indication through the 
common interface is received in response to initializing the computer system. 
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14. In a computer system that including a plurality of initiators, each for initiating 
communication with target devices over a network, a method for configuring the computer 
system to securely communicate with a target device over the network, the method 
comprising the following performed by an abstraction module that configures each of the 
plurality of initiators in a manner that security conflicts between the plurality of initiators is 
avoided: 

an act of exposing a common interface that may be used to configure any of the 
plurality of initiators; 

an act of receiving an indication through the common interface that a selected 
initiator from among the plurality of initiators is to be configured to communicate with a 
selected target device; 

a step for causing the selected initiator to communicate with the selected target 
device such that the security configuration of the selected initiator does not conflict with 
others of the plurality of initiators. 

15. A method in accordance with Claim 14, wherein the step for causing the 
selected initiator to communicate with the selected target device comprises the following: 

an act of retrieving security information from a database that includes information 
that is relevant to configuring security for any of the plurality of initiators; 

an act of identifying a security configuration of the selected initiator using the 
retrieved security information; 

an act of determining that the identified security configuration would not cause the 
selected initiator to conflict with any of the other of the plurality of initiators; and 

an act of configuring the selected initiator using the identified security configuration. 
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16. A method in accordance with Claim 15, wherein the identified security 
configuration is different than the retrieved security information. 
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17. A method in accordance with Claim 15, wherein the identified security 
configuration is the same as the retrieved security information. 



18. A method in accordance with Claim 15, wherein the retrieved security 
information comprises IPSec configuration information. 



19. A method in accordance with Claim 15, wherein the retrieved security 
information comprising CHAP configuration information 



20. A method in accordance with Claim 15, wherein the selected initiator is 
configured to cause communication to occur with the target device using iSCSI. 

g 21 . A method in accordance with Claim 1 5, wherein the act of retrieving security 

«j I ? £ x information from a database comprises an act of retrieving the security information from an 
S d £ o 5 1 Active Directory. 



22. A method in accordance with Claim 15, wherein the selected initiator is a 



O hardware initiator. 
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23. A method in accordance with Claim 15, wherein the selected initiator is a 
software initiator. 
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24. A computer program product for use in a computer system that including a 
plurality of initiators, each for initiating communication with target devices over a network, 
the computer program product for implementing a method for configuring the computer 
system to securely communicate with a target device over the network, the computer 
program product comprising one or more computer-readable media having thereon 
computer-executable instructions that, when executed by one or more processors of the 
computing system, cause the computing system to perform the following: 

an act of instantiating an abstraction module and causes the abstraction module to 
perform the following: 

an act of exposing a common interface that may be used to configure any of 

the plurality of initiators; 

an act of receiving an indication through the common interface that a selected 

initiator from among the plurality of initiators is to be configured to communicate 

with a selected target device; 

an act of retrieving security information from a database that includes 

information that is relevant to configuring security for any of the plurality of 

initiators; 

an act of identifying a security configuration of the selected initiator using the 
retrieved security information; 

an act of determining that the identified security configuration would not 
cause the selected initiator to conflict with any of the other of the plurality of 
initiators; and 

an act of configuring the selected initiator using the identified security 
configuration. 
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25. A computer program product in accordance with Claim 24, wherein the one 
or more computer-readable media are physical memory media. 
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26. A computer program product in accordance with Claim 25, wherein the one 
or more computer-readable media is persistent memory. 



27. A computer program product in accordance with Claim 25, wherein the one 
or more computer-readable media is volatile system memory. 



28. A computer program product in accordance with Claim 24, wherein the 
retrieved security information comprises IPSec configuration information. 



29. A computer program product in accordance with Claim 24, wherein the 
retrieved security information comprising CHAP configuration information. 
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30. A computer program product for use in a computer system that including a 
plurality of initiators, each for initiating communication with target devices over a network, 
the computer program product for implementing a method for configuring the computer 
system to securely communicate with a target device over the network, the computer 
program product comprising one or more computer-readable media having thereon 
computer-executable instructions that, when executed by one or more processors of the 
computing system, cause the computing system to instantiate the following: 

a plurality of initiators, each capable of communicating with at least one of the 
plurality of target devices; 

an abstraction module configured to expose a common interface that may be used to 
configure any of the plurality of initiators, receive an indication through the common 
interface that a selected initiator from among the plurality of initiators is to be configured to 
communicate with a selected target device, retrieve security information from a database 
that includes information that is relevant to configuring security for any of the plurality of 
initiators, identify a security configuration of the selected initiator using the retrieved 
security information in response to receiving the indication, and configure the selected 
indicator using the identified security configuration if the identified security information 
would not cause the selected initiator to conflict with any of the other of the plurality of 
initiators. 

31. A computer program product in accordance with Claim 30, wherein the one 
or more computer-readable media further have thereon computer-executable instructions 
that, when executed by one or more processors of the computing system, cause the 
computing system to instantiate the following: 
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a software module configured to submit the indication to the common interface. 

32. A computer program product in accordance with Claim 30, wherein the one 
or more computer-readable media are physical memory media. 

33. A computer program product in accordance with Claim 32, wherein the one 
or more computer-readable media is persistent memory. 

34. A computer program product in accordance with Claim 32, wherein the one 
or more computer-readable media is volatile system memory. 
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